Stupid people do stupid things
You can't protect against stupidity. Evolution at its finest.
Create ever more 'idiot proof' stuff, nature just creates better idiots
Take this for example, recently in the news, reflection attacks using Memcached
It clearly states here:
https://github.com/memcached/memcached/wiki/ConfiguringServer#networking
By default memcached listens on TCP and UDP ports, both 11211. -l allows you to bind to specific interfaces or IP addresses. Memcached does not spend much, if any, effort in ensuring its defensibility from random internet connections. So you must not expose memcached directly to the internet, or otherwise any untrusted users. Using SASL authentication here helps, but should not be totally trusted.
Need I say more?
Biting the hand that feeds IT
